Linux Kernel Vulnerabilities — Ubuntu Security Update (USN-9035-1)
USN-9035-1 fixes 8 distinct kernel CVEs for Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. Its lead flaw (CVE-2017-9986, CWE-125 out-of-bounds in this advisory's data): Pengfei Wang discovered that the Turtle Beach MultiSound audio device driver contained race conditions when fetching from the ring-buffer, leading to an out-of-bounds access a local attacker could use to crash the system or possibly execute arbitrary code. The notice's severity data reaches CVSS 7.8.
Was das unter einer SharedLicense-Lizenz bedeutet
The audio-driver flaw only matters where that legacy driver is loaded, but the notice bundles 8 kernel fixes — patch on the regular cycle and reboot. Local code-execution potential in a kernel driver justifies prompt treatment.
Pengfei Wang discovered that the Turtle Beach MultiSound audio device
driver in the Linux kernel contained race conditions when fetching from the
ring-buffer, leading to an out-of-bounds access. A local attacker could use
this to cause a denial of service (system crash) or possibly execute
arbitrary code. (CVE-2017-9986)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
(CVE-2022-49114, CVE-2023-52784, CVE-2024-53194, CVE-2024-53210,
CVE-2024-56763, CVE-2026-31657, CVE-2026-43456)
- Ethernet bonding driver;
- PCI subsystem;
- SCSI subsystem;
- Tracing infrastructure;
- B.A.T.M.A.N. meshing protocol;
- IUCV driver;
Häufig gestellte Fragen
Who is affected by the audio driver flaw?
What is the worst outcome?
How to apply?
System auf Schwachstellen prüfen
Wählen Sie Ihr Produkt und Betriebssystem, um die passenden Fix-Befehle zu sehen.
System prüfen